Information Systems Risk & Control Manager
Listed on 2025-12-21
-
IT/Tech
Cybersecurity, Data Security, Information Security
Empowering Africa’s tomorrow, together…one story at a time.
With over 100 years of rich history and strongly positioned as a local bank with regional and international expertise, a career with our family offers the opportunity to be part of this exciting growth journey, to reset our future and shape our destiny as a proudly African group.
My Career Development Portal:
Wherever you are in your career, we are here for you. Design your future. Discover leading-edge guidance, tools and support to unlock your potential. You are Absa. You are possibility.
The Information Systems Risk & Control Lead role exists to proactively manage and strengthen the bank’s technology risk posture within the First Line of Defence (FLOD). The role ensures that information systems are secure, resilient, and compliant with internal policies and regulatory requirements. It supports the bank’s strategic objectives by identifying and mitigating risks across digital platforms, enhancing cybersecurity oversight, and ensuring the integrity and availability of critical systems and data.
This position plays a key role in enabling operational continuity, regulatory compliance, and stakeholder confidence in the bank’s technology environment.
The role holder will be responsible for the following:
- Leading and executing risk-based reviews of core banking systems, applications, and infrastructure to identify control gaps and recommend remediation measures.
- Overseeing cybersecurity governance, including monitoring emerging threats, managing privileged access, and supporting the implementation of security frameworks and awareness programs.
- Ensuring data integrity and system reliability by conducting control testing, reviewing system development standards, and assessing infrastructure and backup processes.
- Supporting business continuity through evaluation and testing of disaster recovery plans and resilience strategies across critical systems.
- Leveraging audit tools, data analytics, and artificial intelligence to enhance audit coverage, identify emerging risks, and perform targeted investigations.
- Collaborating with Risk, Audit, Compliance, and IT teams to report findings, align on control expectations, and support remediation planning.
- Acting as a key FLOD control partner, ensuring that technology risks are identified, assessed, and managed within business operations.
- Plan and perform risk-based reviews of information systems across the bank.
- Conduct general and application control reviews for both simple and complex systems, including core banking platforms and supporting applications.
- Test the adequacy and effectiveness of system control measures, ensuring alignment with internal standards and regulatory expectations.
- Review system logs, recertification processes, and system maintenance activities to ensure compliance and detect anomalies.
- Act as the cybersecurity/Technology champion, advising on emerging threats and vulnerabilities.
- Ensuring access to electronically stored information is secure and risks are appropriately managed.
- Review and monitor segregation of duties, privileged access management, and identity governance across systems.
- Support the implementation of cybersecurity frameworks, policies, and awareness programs.
- Carry out data integrity checks within core banking systems and other critical applications to ensure accuracy and reliability of financial and operational data.
- Review system development standards, operating procedures, programming controls, and network/infrastructure controls.
- Assess backup and disaster recovery processes to ensure business continuity and resilience.
- Make maximum use of Computer-Assisted Audit Tools (CAATs) and Artificial Intelligence to enhance audit coverage and efficiency.
- Use data mining and trend analysis to identify emerging risks and control weaknesses.
- Perform special audits and investigations as requested, including forensic reviews and targeted assessments.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).